Researchers found every major AI provider encrypts reasoning tokens with a single global key—and exploited it to decode a trove of data.

Replayable AI reasoning blocks let researchers recover API keys and passwords from public logs; they say the main extraction attack is now mitigated.

The flaws in Zoom could let someone in a meeting take control of another participant’s device without the victim clicking anything.

Terabytes worth of credentials, many belonging to the world’s biggest and most sensitive organizations, have been exposed in a supply-chain attack on LiteLLM, an open source tool that streamlines ...

Hackers used open-source AI agents OpenClaw and Hermes to break into 85 government accounts and steal thousands of personal records in about four days.